CVE-2023-30177: CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.

PriorityP423medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.40%

31.3th percentile

CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
craftcms	cms	>= 0 < 3.7.68	3.7.68
craftcms	craft_cms	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.